CVE-2022-46864

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Umair Saleem Woocommerce Custom Checkout Fields Editor With Drag & Drop plugin = 0.1 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Umair Saleem Woocommerce Custom Checkout Fields Editor With Drag & Drop plugin = 0.1 versions...

CVE-2022-46864

CVE-2022-46864 affects the WordPress plugin “Umair Saleem Woocommerce Custom Checkout Fields Editor With Drag & Drop” (versions

WordPress plugin Woocommerce Custom Checkout Fields Editor With Drag & Drop 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2023-15089 · WordPress · Umair Saleem Woocommerce Custom Checkout Fields Editor With Drag & Drop

Name of the Vulnerable Software and Affected Versions: Umair Saleem Woocommerce Custom Checkout Fields Editor With Drag & Drop plugin versions = 0.1 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This allows for malicious scripts to be injected...

CVE-2022-46864: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Umair Saleem Woocommerce Custom Checkout Fields Editor With Drag & Drop plugin = 0.1 versions...

Attention Online Shoppers: Don't Be Fooled by Their Sleek, Modern Looks — It's Magecart!

An ongoing Magecart campaign has attracted the attention of cybersecurity researchers for leveraging realistic-looking fake payment screens to capture sensitive data entered by unsuspecting users. "The threat actor used original logos from the compromised store and customized a web element known ...

Malicious code in checkout-demo-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b6c81ff2e93760eb7bdf531dd3932fcfeb0de068e99ab2d1910004c1b0ed884 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-174 Malicious code in checkout-demo-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b6c81ff2e93760eb7bdf531dd3932fcfeb0de068e99ab2d1910004c1b0ed884 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Woocommerce Custom Checkout Fields Editor With Drag & Drop Plugin <= 0.1 is vulnerable to Cross Site Scripting (XSS)

Software Woocommerce Custom Checkout Fields Editor With Drag & Drop Type Plugin Vulnerable versions = 0.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-46864 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID...

Woocommerce Custom Checkout Fields Editor With Drag & Drop <= 0.1 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape the "tab" parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2022-46843

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Le Van Toan Woocommerce Vietnam Checkout plugin = 2.0.4 versions...

CVE-2022-46843

The CVE-2022-46843 entry concerns the WordPress Woocommerce Vietnam Checkout plugin by Le Van Toan, vulnerable in versions

CVE-2022-46843

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Le Van Toan Woocommerce Vietnam Checkout plugin = 2.0.4 versions...

WordPress Plugin Woocommerce Vietnam Checkout 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

PT-2023-15071 · Unknown · Woocommerce Vietnam Checkout

Name of the Vulnerable Software and Affected Versions: Le Van Toan Woocommerce Vietnam Checkout plugin versions prior to 2.0.5 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website,...

CVE-2022-46843: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Le Van Toan Woocommerce Vietnam Checkout plugin = 2.0.4 versions...

A look at a Magecart skimmer using the Hunter obfuscator

Threat actors are notorious for trying to hide their code in various ways, from binary packers to obfuscators. On their own, these tools are not always malicious as they can also be be used by companies or individuals who wish to keep their work safe from piracy, but overall they tend to be large...

WordPress WP Express Checkout (Accept PayPal Payments) Plugin <= 2.2.8 is vulnerable to Cross Site Scripting (XSS)

Software WP Express Checkout Accept PayPal Payments Type Plugin Vulnerable versions = 2.2.8 Fixed in 2.2.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-1469 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID c8954f0fe6fa Credi...

CVE-2023-1469

The WP Express Checkout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘peccouponcode’ parameter in versions up to, and including, 2.2.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with administrator-lev...